C4: Container, Code, Cloud & Context
Designing intelligent systems, one layer at a time. ~ Nithin Mohan T K
After two decades of managing containerized workloads across production environments, I’ve come to appreciate that the difference between a good Kubernetes deployment and a great one often comes down to how intelligently it responds to changing demand. Horizontal Pod Autoscaling (HPA) represents one of those fundamental capabilities that separates reactive operations from proactive infrastructure management. […]
Read more →
Introduction: Amazon Elastic Container Registry (ECR) is a fully managed container registry service provided by AWS. It enables developers to store, manage, and deploy Docker container images securely. In this guide, we’ll explore how to provision a new AWS ECR using Terraform, a popular Infrastructure as Code (IaC) tool. We’ll cover not only the steps […]
Read more →GitOps is a relatively new approach to software delivery that has been gaining popularity in recent years. It is a set of practices for managing and deploying infrastructure and applications using Git as the single source of truth. In this blog post, we will explore the concept of GitOps, its key benefits, and some examples […]
Read more →Today, we’ll take a look at a new feature in AKS called Azure Private Link, which allows you to connect to AKS securely and privately over the Microsoft Azure backbone network. In the past, connecting to AKS from an on-premises network or other virtual network required using a public IP address, which posed potential security […]
Read more →Azure Kubernetes Service(AKS) offers several options for managing identities within Kubernetes clusters, including AKS Managed Identity, Pod Managed Identity, and Workload Managed Identity. Here’s a comparison of these three options: Key Features AKS Managed Identity Pod Managed Identity Workload Managed Identity Overview A built-in feature of AKS that allows you to assign an Azure AD […]
Read more →AKS workload identity and AKS pod managed identity both provide a way to manage access to Azure resources from within a Kubernetes cluster. However, there are some key differences between the two features. Scope AKS pod managed identity provides a managed identity for each individual pod within a Kubernetes cluster. This allows you to grant […]
Read more →